ARP watch for 192.168.0.104 (demo-hp vmbr0 7c:d3:0a:77:d9:76), from 09:58:07 UTC
09:58:07 mac=7c:d3:0a:77:d9:76 ssh=open
10:02:18 mac=b8:06:0d:60:45:58 ssh=shut
10:02:58 mac=7c:d3:0a:77:d9:76 ssh=open
10:03:38 mac=b8:06:0d:60:45:58 ssh=shut
10:08:59 mac=7c:d3:0a:77:d9:76 ssh=open
10:10:19 mac=b8:06:0d:60:45:58 ssh=shut
10:12:50 mac=7c:d3:0a:77:d9:76 ssh=open
10:17:10 mac=b8:06:0d:60:45:58 ssh=shut
10:17:50 mac=7c:d3:0a:77:d9:76 ssh=open
10:19:21 mac=b8:06:0d:60:45:58 ssh=shut
stopped by CC at 10:20:37 UTC (enough to show the flips)
